How severe is CVE-2007-1559?

CVE-2007-1559 has a CVSS 2.0 base score of 9.3, rated critical severity.

Is CVE-2007-1559 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 32% (98th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-1559?

CVE-2007-1559 affects Roxio Cineplayer. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2007-1559?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2007-1559 published?

CVE-2007-1559 was published on 2007-04-11 and last updated on 2026-06-16.

CVE-2007-1559

CVE-2007-1559 is a critical-severity vulnerability in Roxio Cineplayer with a CVSS 2.0 base score of 9.3. Its EPSS exploit-prediction score of 32% places it in the 98th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: Critical (CVSS 2.0 base score 9.3)
EPSS exploit prediction: 32% (98th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Roxio Cineplayer
Published: 2007-04-11
Last modified: 2026-06-16

Description

Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via (1) unspecified long property values to SonicMediaPlayer.dll or (2) long arguments to unspecified methods in SonicMediaPlayer.dll.

Frequently asked questions

What is CVE-2007-1559?: Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via (1) unspecified long property values to SonicMediaPlayer.dll or (2) long arguments to unspecified methods in SonicMediaPlayer.dll.
How severe is CVE-2007-1559?: CVE-2007-1559 has a CVSS 2.0 base score of 9.3, rated critical severity.
Is CVE-2007-1559 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 32% (98th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2007-1559?: CVE-2007-1559 affects Roxio Cineplayer. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2007-1559?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2007-1559 published?: CVE-2007-1559 was published on 2007-04-11 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:roxio:cineplayer:3.2:*:*:*:*:*:*:*

More vulnerabilities in Roxio Cineplayer

CVE-2009-4841 — Critical (CVSS 9.3): Heap-based buffer overflow in the SonicMediaPlayer ActiveX control in SonicMediaPlayer.dll in Roxio CinePlayer 3.2…
CVE-2009-4840 — Critical (CVSS 9.3): Heap-based buffer overflow in the IAManager ActiveX control in IAManager.dll in Roxio CinePlayer 3.2 allows remote…
CVE-2007-3829 — Critical (CVSS 9.3): Multiple stack-based buffer overflows in (a) InterActual Player 2.60.12.0717 and (b) Roxio CinePlayer 3.2 allow remote…
CVE-2007-0348 — Critical (CVSS 9.3): Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio…

All CVEs affecting Roxio Cineplayer →